Abstract: A binary code similarity detection system that compares a target binary code to a source code by comparing the target binary code to a comparing binary generated by compiling the source code. Rather than using a comparing binary generated using a random or fixed compiling configuration, the system identifies the compiling configuration of the target binary code and compares the target binary code to a comparing binary generated using the same compiling configuration as the target binary code. The compiling configuration of the target binary code may be identified by a neural network (e.g., a graph attention network trained on attributed function call graphs of binary codes with known compiling configurations). The target binary code and the comparing binary may be compared using a graph neural network (e.g., a graph triplet loss network) that compares attributed control flow graphs of the of the target binary code and the comparing binary.

Abstract: A binary code similarity detection system that compares a target binary code to a source code by comparing the target binary code to a comparing binary generated by compiling the source code. Rather than using a comparing binary generated using a random or fixed compiling configuration, the system identifies the compiling configuration of the target binary code and compares the target binary code to a comparing binary generated using the same compiling configuration as the target binary code. The compiling configuration of the target binary code may be identified by a neural network (e.g., a graph attention network trained on attributed function call graphs of binary codes with known compiling configurations). The target binary code and the comparing binary may be compared using a graph neural network (e.g., a graph triplet loss network) that compares attributed control flow graphs of the of the target binary code and the comparing binary.

Abstract: A computing device including a processor operable to process data at a processing speed and a storage device in communication with the processor operable to retrieve stored data at a data transfer rate, where the data transfer rate matches the processing speed.